certbot/tests
Brad Warren d1330efe41
Print warning when certbot-auto has insecure permissions. (#6995)
This PR attempts to better inform people about the problem identified at https://community.letsencrypt.org/t/certbot-auto-deployment-best-practices/91979/.

I was hesitant to add the flag --no-permissions-check, however, if there's some obscure distro out there (or custom user setup) that has a strange users and groups, I didn't want us to either:

Have to put out a bug fix release
Refuse to fix the problem and let them deal with warnings on every run

* add check_permissions.py

* Update letsencrypt-auto.template.

* build letsencrypt-auto

* Add test_permissions_warnings to auto_test

* Allow uid/gid < 1000.

* Add --no-permissions-check to Certbot.

* Add --no-permissions-check to certbot-auto.

* Add test farm test that letsencrypt-auto is quiet.

As a bonus, this new test will catch problems like the one that the caused
0.33.1 point release.

* Update CHANGELOG about permissions check.

* Update permissions comment.

* Fix symlink handling.

* Use a better default in auto_test.py.
2019-04-30 10:45:03 -07:00
..
integration Remove tls-sni related flags in cli. Add a deprecation warning instead. (#6853) 2019-03-26 17:46:32 -07:00
letstest Print warning when certbot-auto has insecure permissions. (#6995) 2019-04-30 10:45:03 -07:00
boulder-fetch.sh Remove tls-sni integration tests (#6852) 2019-03-13 15:42:07 -07:00
boulder-integration.sh Separate integration (#5814) 2018-08-29 14:11:13 -07:00
certbot-boulder-integration.sh Remove tls sni in nginx plugin (#6857) 2019-03-18 10:22:19 -07:00
certbot-pebble-integration.sh Implement POST-as-GET requests (#6522) 2018-11-29 19:42:06 -05:00
lock_test.py Fix the Nginx configuration during integration tests (#6801) 2019-03-01 13:54:09 -08:00
manual-dns-auth.sh Fix --allow-subset-of-names (#5690) 2018-03-08 11:12:33 -08:00
manual-dns-cleanup.sh Fix --allow-subset-of-names (#5690) 2018-03-08 11:12:33 -08:00
manual-http-auth.sh Enable boulder tests on Python 3 2017-04-15 02:32:18 +08:00
manual-http-cleanup.sh Merge the manual and script plugins (#3890) 2016-12-22 08:24:08 -08:00
modification-check.py Fail-fast in test/cover/lint scripts (#6487) 2018-11-14 13:57:40 -08:00
pebble-fetch.sh Fix the pebble fetch script (#6765) 2019-02-14 10:43:27 -08:00
run_http_server.py Drop support for EOL Python 2.6 and 3.3 2018-02-16 16:14:01 -08:00
tox-boulder-integration.sh Retry failures to start boulder (#5176) 2017-10-12 17:00:13 -07:00